Threat Intelligence Engineer — Flexible Hours & Automation

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon TIGER team analyzes indicators to generate actionable threat intelligence and supports incident response, red teams, and detections teams. The Security Intelligence Engineer role requires deep knowledge of cyber threats, TTPs, networking and forensics, with experience driving analytic capabilities across teams.

You will work on cross-team initiatives, develop analytic techniques, and contribute to proactive threat mitigation while ensuring readiness for on-call duties and incident support.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship).

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Perform deep dive analysis of malicious artifacts.
• Draft and publish finished written threat intelligence products based on findings.
• Periodic on-call responsibilities.

Skills

Python

Ruby

Go

Java

C++

Networking

Scripting

Security code review

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon TIGER team analyzes indicators to generate actionable threat intelligence and supports incident response, red teams, and detections teams. The Security Intelligence Engineer role requires deep knowledge of cyber threats, TTPs, networking and forensics, with experience driving analytic capabilities across teams.

You will work on cross-team initiatives, develop analytic techniques, and contribute to proactive threat mitigation while ensuring readiness for on-call duties and incident support.